Arbitrary Java Code Execution through SOAP Connector in IBM WebSphere Application Server

CVE-2018-1567 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialized object from untrusted sources. IBM X-Force ID: 143024.

Learn more about our Cis Benchmark Audit For Ibm Websphere.